tiauna.com

Issued by R3

About this certificate

This digital certificate with serial number 03:af:a8:f2:64:0f:9a:75:e4:6d:b9:6f:18:5e:00:88:ac:b0 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tiauna.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:af:a8:f2:64:0f:9a:75:e4:6d:b9:6f:18:5e:00:88:ac:b0
Serial Number (int): 321110840875053788358334203408946433666224
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fa:75:e2:aa:56:08:4e:46:8d:ac:a6:a0:de:a9:20:e3:e7:93:73:2a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 97:3f:d1:d1:c2:07:46:7c:5f:a4:13:3f:c4:ee:8d:2a:b8:ce:d8:01
Fingerprint (sha256): 1e:b9:aa:a8:56:d8:46:71:ac:f8:4e:a3:8e:05:9a:9d:dc:d7:82:37:00:e4:f1:5a:27:61:3a:75:77:59:99:80

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tiauna.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tiauna.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.bigiedeasmath.com
*.bitcoinkash.com
*.bityoung.co
*.c-patex.co
*.catcut.co
*.cdstm.co
*.centraltexascremations.com
*.cryptaldash.co
*.drsaina.co
*.elmanitas.com
*.enence.co
*.formget.co
*.fotmob.co
*.gapcanada.co
*.gbebrokers.co
*.hantecfx.co
*.hardayal.com
*.hirist.co
*.hiroseuk.co
*.ifukang.co
*.jessikalovesa.com
*.kaochi.com
*.kenoby.co
*.korano.co
*.levantado.com
*.lhscan.co
*.medibang.co
*.medsci.co
*.mzco.org
*.nitago.co
*.nottinghamshirepayslips.co.uk
*.osada.com
*.pcmban.co
*.protovation.com
*.sbree.net
*.sdifen.co
*.sekindo.co
*.superiogrocers.com
*.syncer.co
*.targeo.co
*.tiauna.com
*.toster.co
*.updato.co
*.wandhi.co
*.wayafir.com
*.webchoc.co
*.yiqifa.co
*.yopublico.net
*.yyetss.co
*.zimuku.co
bigiedeasmath.com
bitcoinkash.com
bityoung.co
c-patex.co
catcut.co
cdstm.co
centraltexascremations.com
cryptaldash.co
drsaina.co
elmanitas.com
enence.co
formget.co
fotmob.co
gapcanada.co
gbebrokers.co
hantecfx.co
hardayal.com
hirist.co
hiroseuk.co
ifukang.co
jessikalovesa.com
kaochi.com
kenoby.co
korano.co
levantado.com
lhscan.co
medibang.co
medsci.co
mzco.org
nitago.co
nottinghamshirepayslips.co.uk
osada.com
pcmban.co
protovation.com
sbree.net
sdifen.co
sekindo.co
superiogrocers.com
syncer.co
targeo.co
tiauna.com
toster.co
updato.co
wandhi.co
wayafir.com
webchoc.co
yiqifa.co
yopublico.net
yyetss.co
zimuku.co

Other certificates including the domain name tiauna.com

(limited to 100 certificates)
themeisters.com
yanaguptayana.com
tiauna.com
wwwblack-friday.net
orilynnofficial.com
direktverkauf.com
myshinyjewelry.com
www.knocka.com
tiauna.com
etheridge.net
tiauna.com
thefastball.com

Certificate

The complete raw certificate details for tiauna.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321110840875053788358334203408946433666224
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-17 21:26:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 21:26:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tiauna.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 829595830550147165043641984165134875431403303075754050940906692028710286570425055884334564501926108801346867432712355856100630018763960798550843770096256368027504939295006726570599710959422278875181984532974382159646411404743594374197493258040765300265233276745716609367787823979836696905104545257463680773271789750788524434390323665295861926527713004644486006357709705440184675955725517194464848456130158905195782593569525080332186296259992698331073347374785546070297397354085090629228288439283417960166423356898101253694025032583484217028784751522911147944991743049093785254140970420588856169343516403602930335585444899950734038526850018922889161183418480701879725282828181978256513720285503342925650191952019651083085024630135978691637461249256202750967632009725284420563151404279576085271402864653896818844587288204441363089032168877579627902277868817460618651684004301228498909168856680582740289876906836833121111291024001896474397161245283223357284838113130058074162718113663528996585931364606449736452521223564519725186274845748799059839649087532740828821112675770572092379819760957665551516296878243657668552809275012748553351831876966382023447852679454257783859266624324927867055934450166902614495864058001036829193165351819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fa75e2aa56084e468daca6a0dea920e3e793732a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1438 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bigiedeasmath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitcoinkash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bityoung.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.c-patex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catcut.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdstm.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centraltexascremations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cryptaldash.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drsaina.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.elmanitas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enence.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.formget.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fotmob.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gapcanada.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gbebrokers.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hantecfx.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hardayal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hirist.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hiroseuk.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ifukang.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jessikalovesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaochi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kenoby.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.korano.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.levantado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lhscan.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medibang.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medsci.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mzco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nitago.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nottinghamshirepayslips.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.osada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pcmban.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.protovation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sbree.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sdifen.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sekindo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.superiogrocers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.syncer.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.targeo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiauna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.toster.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.updato.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wandhi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wayafir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webchoc.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yiqifa.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yopublico.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yyetss.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zimuku.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigiedeasmath.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitcoinkash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bityoung.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c-patex.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catcut.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdstm.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centraltexascremations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptaldash.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drsaina.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elmanitas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enence.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formget.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fotmob.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gapcanada.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gbebrokers.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hantecfx.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hardayal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hirist.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiroseuk.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifukang.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jessikalovesa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaochi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kenoby.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'korano.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'levantado.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lhscan.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medibang.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medsci.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mzco.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nitago.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nottinghamshirepayslips.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcmban.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protovation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbree.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdifen.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sekindo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'superiogrocers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syncer.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'targeo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiauna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toster.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'updato.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wandhi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayafir.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webchoc.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yiqifa.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yopublico.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yyetss.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zimuku.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aa540ad580000040300463044022070153e00f5b55c4396f3e7049ec8acf7550fab3d04d339b2279960aedf4ace3d02205ea155e223c154df49ffdcb2a1bf0795246a6965717a4011728036541c3cb7f20076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aa540ad5b0000040300473045022015c661a4ebd0a761e4dc28d63668116e9b7afb9c265ebf41c08b7741f955b5a70221008ea1c5c5efb243d7c405f867d597161328c9d648d6c74365cfeff6c3ae2805e0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006438644b506786f0b06ef0236eafcdfc8a63721860987ba045dcee091ae09867c500a897f6cb48e2d0b2f2fcf14ab6064c16f9ccae9a5f738bccb68c6bfc4e1788bc1986185e53b4e6e20c1f730a5cc30c0dbfce017de4ec3bf6a53b2f7ab14d86c812228f550b5193eab1bd092d268cc8ea0207404eeb438e3f8a3c2af426bc325dcc29d825033fde5f31fbebf8044a63d958f1847bdd895530b5fc2585fbd36ed5fa1a8671aecc34aac50350c7a4e0e27fa289d8019b20ae8217729fdbb1e4af0f6db7b469e30f7b0316b8a865f90653d623e5e8e3c706c20cb8817ebb2687819a49c7eca422131b22baeb5f0bc767512840567c38b1d9b85b9b4010a91180